FortiOS Firewall Policy46

9 min

Resumo

Configure as políticas de IPv4 para IPv6 no FortiOS.

Parâmetros

Parâmetro	Tipo	Escolhas \| Valor Padrão	Comentários
firewall_policy46	dictionary		Configure as políticas de IPv4 para IPv6.
state	string	Escolhas: - present (default) - absent	Indica se deve criar ou remover o objeto. Use present para criar, ou absent para excluí-lo.

Subcampos da opção firewall_policy46

Parâmetro	Tipo	Comentários
action	string	Aceite ou negue o tráfego que corresponde à política.
comments	string	Comment.
dstaddr	list	Destination address objects.
dstintf	string	Destination interface name. Source system.interface.name system.zone.name.
fixedport	string	Enable/disable fixed port for this policy.
ippool	string	Enable/disable use of IP Pools for source NAT.
logtraffic	string	Enable/disable traffic logging for this policy.
per_ip_shaper	string	Per IP traffic shaper. Source firewall.shaper.per-ip-shaper.name.
permit_any_host	string	Enable/disable allowing any host.
policyid - required	integer	Policy ID.
poolname	list	IP Pool names.
schedule	string	Schedule name. Source firewall.schedule.onetime.name firewall.schedule.recurring.name firewall.schedule.group.name.
service	list	Service name.
srcaddr	list	Source address objects.
srcintf	string	Source interface name. Source system.zone.name system.interface.name.
status	string	Enable/disable this policy.
tcp_mss_receiver	integer	TCP Maximum Segment Size value of receiver (0 - 65535)
tcp_mss_sender	integer	TCP Maximum Segment Size value of sender (0 - 65535).
traffic_shaper	string	Traffic shaper. Source firewall.shaper.traffic-shaper.name.
traffic_shaper_reverse	string	Reverse traffic shaper. Source firewall.shaper.traffic-shaper.name.
uuid	string	Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

Subcampos da opção dstaddr

Parâmetro	Tipo	Escolhas \| Valor Padrão	Comentários
name - required	string		Address name. Source firewall.vip46.name firewall.vipgrp46.name.

Subcampos da opção poolname

Parâmetro	Tipo	Escolhas \| Valor Padrão	Comentários
name - required	string		IP pool name. Source firewall.ippool6.name.

Subcampos da opção service

Parâmetro	Tipo	Escolhas \| Valor Padrão	Comentários
name - required	string		Service name. Source firewall.service.custom.name firewall.service.group.name.

Subcampos da opção srcaddr

Parâmetro	Tipo	Escolhas \| Valor Padrão	Comentários
name - required	string		Address name. Source firewall.address.name firewall.addrgrp.name.

Exemplos

# Exemplo: Configure IPv4 to IPv6 policies.
- fortios_firewall_policy46:
    host: "host"
    username: "username"
    password: "password"
    vdom: "vdom"
    https: "False"
    state: "present"
    firewall_policy46:
        action: "accept"
        comments: "<your_own_value>"
        dstaddr:
            -  name: "default_name_6 (source firewall.vip46.name firewall.vipgrp46.name)"
        dstintf: "<your_own_value> (source system.interface.name system.zone.name)"
        fixedport: "enable"
        ippool: "enable"
        logtraffic: "enable"
        per_ip_shaper: "<your_own_value> (source firewall.shaper.per-ip-shaper.name)"
        permit_any_host: "enable"
        policyid: "13"
        poolname:
            -  name: "default_name_15 (source firewall.ippool6.name)"
        schedule: "<your_own_value> (source firewall.schedule.onetime.name firewall.schedule.recurring.name firewall.schedule.group.name)"
        service:
            -  name: "default_name_18 (source firewall.service.custom.name firewall.service.group.name)"
        srcaddr:
            -  name: "default_name_20 (source firewall.address.name firewall.addrgrp.name)"
        srcintf: "<your_own_value> (source system.zone.name system.interface.name)"
        status: "enable"
        tcp_mss_receiver: "23"
        tcp_mss_sender: "24"
        traffic_shaper: "<your_own_value> (source firewall.shaper.traffic-shaper.name)"
        traffic_shaper_reverse: "<your_own_value> (source firewall.shaper.traffic-shaper.name)"
        uuid: "<your_own_value>"

Valores retornados

Este módulo extende os mesmos valores retornados do módulo base fortios.